Fire them immediately (Score 5, Interesting)

"administrative action or termination." ...OR termination? Every single one of them should have been fired at the least. If I looked up an ex girlfriend on the electronic medical record system I'm logged into right now, I would be subject to a $50,000 dollar fine and a year in prison even after being fired ( AMA HIPAA penalties page). This kind of abuse of access to privileged information similar to a HIPAA violation, except double illegal since most of the surveillance has no legal basis either.